Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
File: zR5W5MTEpRjyOIpay1rwRSzCpZU.mft (raw, json)
Hash identifier: QX7Kbmp0Zj9eMTlxb5Hz0jvBzJIJ/1EPUxTEePdXP1I=
Subject key identifier: 85:69:20:E9:0D:15:9E:EE:06:60:16:45:24:41:8A:1E:A7:1E:F8:66
Authority key identifier: CD:1E:56:E4:C4:C4:A5:18:F2:38:8A:5A:CB:5A:F0:45:2C:C2:A5:95
Certificate issuer: /CN=cd1e56e4c4c4a518f2388a5acb5af0452cc2a595
Certificate serial: 019659B9C3D714E9760F7A2038B564FD5A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zR5W5MTEpRjyOIpay1rwRSzCpZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
Manifest number: 0CC8
Signing time: Mon 21 Apr 2025 19:01:08 +0000
Manifest this update: Mon 21 Apr 2025 19:01:08 +0000
Manifest next update: Tue 22 Apr 2025 19:01:08 +0000
Files and hashes: 1: ke5imTlr7fT0_-DE8h9O78Ggh4s.roa (hash: 05xyuy/re9IJXLD81+YTPEcHrtJ82VFe2mcpWEaKIAc=)
2: zR5W5MTEpRjyOIpay1rwRSzCpZU.crl (hash: PF/i2NZbFq6wIS93jy94aECHiUXihM5h5H05Ueewj9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zR5W5MTEpRjyOIpay1rwRSzCpZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:c3:d7:14:e9:76:0f:7a:20:38:b5:64:fd:5a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1e56e4c4c4a518f2388a5acb5af0452cc2a595
Validity
Not Before: Apr 21 19:01:08 2025 GMT
Not After : Apr 22 19:01:08 2025 GMT
Subject: CN=856920e90d159eee0660164524418a1ea71ef866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:36:6a:03:e4:ed:57:3c:84:38:8b:72:f8:11:
c7:67:71:a9:5f:38:3c:84:0b:3e:e4:ad:b3:b6:df:
75:d0:78:94:88:f6:fe:44:2b:db:83:34:a1:75:d7:
53:bc:1d:d9:dd:45:04:7b:78:a5:d2:55:00:ea:d4:
e4:23:e6:45:52:3f:ee:03:be:2c:36:dc:d5:da:43:
3d:e8:42:f4:72:66:15:4a:c3:2c:1d:c2:1f:d2:25:
b9:50:0d:ca:7c:1e:61:c6:1e:b2:6f:55:8b:18:52:
99:3a:30:df:07:24:9a:a6:60:a4:de:44:93:94:ed:
df:36:99:9d:08:0c:6c:b9:cf:e0:3f:8a:aa:7c:84:
f6:f0:5e:6a:51:65:68:69:84:06:d2:8a:76:aa:4a:
f7:a7:ed:ee:91:5b:f4:3b:39:5d:19:f5:26:bd:f5:
0f:31:0e:e2:8a:9e:59:f2:0d:52:63:18:f2:d0:e5:
2c:81:42:a8:79:24:8d:d7:e1:c6:7b:50:b5:ea:e5:
c1:cf:20:35:56:0d:63:a5:f4:5a:f5:9d:72:1e:67:
02:2e:17:47:e5:e1:ba:f0:b0:d5:ff:8f:e9:d2:6c:
c1:9a:ef:44:a3:ba:2f:d3:98:04:88:df:8d:8f:fe:
ad:e5:b2:9b:c3:7d:e6:da:a2:79:53:b9:7d:e0:f9:
2b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:69:20:E9:0D:15:9E:EE:06:60:16:45:24:41:8A:1E:A7:1E:F8:66
X509v3 Authority Key Identifier:
keyid:CD:1E:56:E4:C4:C4:A5:18:F2:38:8A:5A:CB:5A:F0:45:2C:C2:A5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR5W5MTEpRjyOIpay1rwRSzCpZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:15:47:d9:2b:3a:f6:ae:a4:51:33:23:97:09:99:a5:a4:46:
13:ee:c1:98:c0:87:fe:f6:cd:c4:6f:81:36:e4:61:ae:97:eb:
4e:44:7a:04:7f:77:2f:46:ed:c2:f9:70:e7:6e:4e:d8:09:2f:
20:0a:9a:34:90:76:db:07:87:57:d9:9b:eb:4d:17:f2:3b:76:
76:80:c7:4a:85:59:cc:cd:4d:95:a6:cd:f7:ba:94:53:df:80:
7b:e1:cc:de:b0:c8:b4:7e:6f:48:fb:05:a5:9b:05:f6:c1:11:
23:21:ed:37:66:4f:eb:7c:8a:ce:6e:d8:53:e9:2d:61:26:82:
9a:47:29:1d:a4:96:f7:37:7a:b6:f0:8a:f6:72:02:93:1f:6f:
02:3e:fe:c8:59:6b:be:c3:10:88:2c:8f:c5:dc:06:bc:37:8e:
db:ea:3f:85:c7:ac:9a:4d:de:13:c8:92:04:a0:89:03:8a:72:
aa:9d:0e:c4:19:b9:fb:cd:67:64:87:27:cd:45:9d:c8:86:7d:
7b:0b:a6:45:1e:b2:42:c4:3f:9b:44:a9:56:69:e1:4b:db:2c:
f8:ef:9e:3b:b5:ce:b9:b5:26:81:07:69:e7:02:7e:ee:e2:02:
16:f9:2f:dd:b7:4c:17:47:f4:08:f2:e6:15:13:60:32:b7:71:
e5:1d:44:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:19 2025 by rpki-client